GitHub Advisoryadvisory · crates.io
GHSA-84x2-2qv6-qg56 Nervos CKB P2P DoS Attacks
CRITICAL
Official page ↗
- Ecosystem
- crates.io
- Packages
- ckb
- Severity
- Critical
- Reviewed
- 2024-02-02
Affected packages
• crates.io ckb: < 0.34.0 → fixed in 0.34.0
Description
The P2P protocols lack of rate limit. For example, in relay protocol, when a node receives a broadcasted `tx_hashes`, it will mark it in memory to avoid duplicated requests. code → .
It is easy to establish a DoS attach by generating random tx hashes.
Impact
It affects all nodes connected to the P2P network.
Workarounds
Apply rate limit on the data sent to CKB P2P port.